Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 01:16
Static task
static1
Behavioral task
behavioral1
Sample
45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe
Resource
win7-20240221-en
General
-
Target
45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe
-
Size
1.1MB
-
MD5
9bd9899dfed52791f2ad4ea21194b016
-
SHA1
7c6165cd84aa9d848869f31491be10c4bcabafb6
-
SHA256
45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761
-
SHA512
edcad9fc0eb993c95cce3c5a9a1692f87972a4ede0e61aef164a2464c022930c515783751a3a2722be4e9b473a4f60246d171432d49a9b5a620b4c22eefc3346
-
SSDEEP
24576:lAHnh+eWsN3skA4RV1Hom2KXMmHaco5m0JXfz1IZY3ub5:Uh+ZkldoPK8Yaco5HBA4e
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1912 45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe 1912 45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1912 45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe 1912 45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe"C:\Users\Admin\AppData\Local\Temp\45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
266KB
MD548067d5ba3abc44be5a4cd2cba27fd2e
SHA1c3b617cb75eb48b8da34eaa3b5eac41610231078
SHA256035e764be5a63a345536a38aa9adcaa1eeedcfdf75af7731b14d93266aa04e0c
SHA512bb03360a1d9e1cb02b1ed0d01d391c089038b97645a4a99eb291a6e546ccbcc9dadc80f2367f3acd2f2e593d3173007dd46c8072a0e13f76176f0ec3156faeae